Post-Quantum Crypto Architect for Cloud & PKI

Starling; Cardiff; Hybrid; GBP 100,000 - 140,000; Full time

Benefits offered by this job

25 days holiday

Extra birthday leave

Private Medical Insurance

Company pension scheme

Life insurance

Cycle to Work scheme

Salary Sacrificed perks

Job summary

Starling is seeking a mid-to-senior Information Security Architect to lead our Post-Quantum Cryptography strategy and crypto roadmaps across cloud-native and on‑prem environments. You will design, assess cryptographic controls and drive crypto‑agility across engineering teams.

You will collaborate with PKI/HSM specialists, security operations and platform engineers to embed cryptography governance, threat modeling and secure design reviews into the development lifecycle.

Qualifications

• Strong knowledge of PQC standards (NIST) and crypto‑agility practices.
• Extensive PKI, HSMs, and key management expertise.
• Experience securing cloud-native architectures (AWS/GCP).
• Proven ability to perform threat modeling and security reviews.
• Ability to define and implement cryptographic governance and standards.

Responsibilities

• Architect end-to-end security for cloud-native apps and banking platforms.
• Lead PQC transition roadmap and crypto-inventory strategy.
• Perform threat modeling and risk assessments on architectures.
• Define enterprise cryptographic management standards (keys, crypto suites).
• Review RFCs/ADR documents to ensure security guardrails and compliance.
• Mentor engineers on cryptographic implementations and data protection.
• Collaborate with engineers, cloud architects, and security ops to embed security in SDLC.

Skills

Post-Quantum Cryptography

PKI & HSMs

Cloud security (AWS/GCP)

Threat modeling

Cryptographic governance

Security architecture

Kubernetes (security)

Job description

Starling is seeking a mid-to-senior Information Security Architect to lead our Post-Quantum Cryptography strategy and crypto roadmaps across cloud-native and on‑prem environments. You will design, assess cryptographic controls and drive crypto‑agility across engineering teams.

You will collaborate with PKI/HSM specialists, security operations and platform engineers to embed cryptography governance, threat modeling and secure design reviews into the development lifecycle.